apify-ci-integration
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a configuration guide for automating CI/CD using GitHub Actions and the Apify CLI, following standard development practices.
- [EXTERNAL_DOWNLOADS]: The skill references official GitHub Actions (actions/checkout@v4, actions/setup-node@v4) and standard npm packages (apify-cli, apify-client, vitest). These are well-known services and do not pose a security risk in this context.
- [CREDENTIALS_UNSAFE]: Instructions correctly demonstrate the use of GitHub Secrets for managing API tokens. It uses generic placeholders like 'apify_api_YOUR_CI_TOKEN' and descriptive dummy values for testing examples rather than exposing real credentials.
- [COMMAND_EXECUTION]: The skill employs the GitHub CLI ('gh') for repository management tasks, such as setting secrets and configuring branch protection rules, which is aligned with its intended purpose of CI/CD integration.
Audit Metadata